9f5396849b3ec4df005b8dcf9dd2ca8e8432d9700020bd1c85234d061c7a42e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f5396849b3ec4df005b8dcf9dd2ca8e8432d9700020bd1c85234d061c7a42e8
Size

96KB
Sample

221004-hjev5agdbr
MD5

42eef3af40a7433c86f71923fffa2840
SHA1

dbed90e1d68156a2169897f71e9afa5e3b8ad9ed
SHA256

9f5396849b3ec4df005b8dcf9dd2ca8e8432d9700020bd1c85234d061c7a42e8
SHA512

e6dba51d7d5be38a3f373f956d896a39e799be780dc5014fbae91b7f620bbfc075fb1dd045ebd2c97f1a3730b0f1df032df404cc53d3ab4c17f626a71e003304
SSDEEP

1536:FArCEP0GlCxbJWDuQ4XRrzIqOR7vGwCeDEm:W9Cxbe4VIV1CA

Score

7^/10

Malware Config

Targets

- Target
  
  9f5396849b3ec4df005b8dcf9dd2ca8e8432d9700020bd1c85234d061c7a42e8
- Size
  
  96KB
- MD5
  
  42eef3af40a7433c86f71923fffa2840
- SHA1
  
  dbed90e1d68156a2169897f71e9afa5e3b8ad9ed
- SHA256
  
  9f5396849b3ec4df005b8dcf9dd2ca8e8432d9700020bd1c85234d061c7a42e8
- SHA512
  
  e6dba51d7d5be38a3f373f956d896a39e799be780dc5014fbae91b7f620bbfc075fb1dd045ebd2c97f1a3730b0f1df032df404cc53d3ab4c17f626a71e003304
- SSDEEP
  
  1536:FArCEP0GlCxbJWDuQ4XRrzIqOR7vGwCeDEm:W9Cxbe4VIV1CA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2